Help legitimate business email authenticate correctly.

SPF: authorise your sending systems

SPF publishes which systems may send for the envelope sender domain used during email delivery. We review the existing record, legitimate providers and DNS lookup usage before recommending changes. An SPF pass alone does not establish that the visible From address is genuine; DMARC alignment matters too.

Adding a second SPF record is not a way to add another provider. Changes need to be combined correctly into the domain’s single SPF policy, using the provider’s current instructions. Unnecessary or obsolete includes can consume the protocol’s DNS lookup allowance.

DKIM: sign outgoing messages

Your email provider signs messages with a private key. A matching public key is published in DNS under a selector. Receiving systems can verify the signature and signing domain. We help check provider settings, publish the required public DNS values and verify test messages.

Different services can use different selectors. The absence of a guessed selector is not proof that DKIM is missing. We need the provider’s configuration or a representative message header to verify the relevant sending path.

What we need from you

• Your domain, DNS host and main email provider.
• A list of other services sending as your business, including website forms.
• Access through an agreed limited-permission role, your existing IT provider, or changes you make with guidance.
• Agreed test messages or relevant headers, with unrelated personal content removed.

Testing and handover

We review SPF/DKIM results and DMARC alignment for the agreed sending systems, record changes and flag anything still unresolved. Forwarded mail can behave differently, so we investigate relevant failures rather than treating every SPF failure as malicious.

What this does not include automatically

Mailbox migration, account recovery, website development, malware removal and unlimited third-party troubleshooting are outside a standard authentication setup unless separately agreed. Authentication improves the basis for trusting messages; it does not guarantee inbox delivery.

Discuss your domain

Start with your domain and the services you use. We confirm the scope before making changes.